This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/r8DBa4BaS7Ouc-3CTFODgPwOmkk.cer File: r8DBa4BaS7Ouc-3CTFODgPwOmkk.cer (raw, json) Hash identifier: zBBfiBpMSdyO1GekrIlcZF3APyiDrSi+1oy/13H3Ztc= Subject key identifier: AF:C0:C1:6B:80:5A:4B:B3:AE:73:ED:C2:4C:53:83:80:FC:0E:9A:49 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3F20 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36F8BC2/12B3179239E811EFAFB75F95762E951A/r8DBa4BaS7Ouc-3CTFODgPwOmkk.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36F8BC2/12B3179239E811EFAFB75F95762E951A/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 05:13:45 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 329435 IP: 102.209.0.0/22 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16160 (0x3f20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 05:13:45 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36F8BC2AF, serialNumber=AFC0C16B805A4BB3AE73EDC24C538380FC0E9A49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d8:05:28:33:81:78:37:92:23:54:9b:bd:45: fc:3f:5f:45:96:e0:46:5e:38:d2:20:65:e7:e1:17: 9d:df:59:3f:47:e0:0e:47:5b:1d:c7:cd:11:f2:24: 34:07:c8:45:50:da:0d:52:c2:a0:71:0c:30:e5:e6: 1a:71:b0:39:b3:db:df:9e:1c:4f:50:19:04:04:b2: 4d:e5:fe:ab:7a:c5:7a:1f:98:98:c5:ba:0b:04:b3: cc:88:3b:6b:12:b1:47:8b:bd:9d:a3:24:90:36:5b: 11:32:02:53:da:3a:40:5d:f6:01:dd:96:3e:c3:bb: f8:67:97:c5:14:7a:2f:6d:29:12:64:62:ee:f0:ee: dc:8e:23:26:4c:ab:45:dd:61:37:54:14:2f:0f:b5: ea:77:fc:ff:f5:79:17:44:58:1f:00:5b:67:13:53: e0:34:96:61:a3:b6:87:11:7b:7b:9e:2d:e7:65:3c: 38:19:da:eb:33:22:5c:6d:31:f0:a5:50:50:d7:d2: 52:67:88:f0:7a:1f:bc:57:25:b8:98:99:07:b3:e8: c6:2c:22:53:71:15:72:43:71:8b:05:33:a6:25:a0: 29:52:3d:2b:63:10:67:b8:a8:68:02:da:5f:63:8a: 55:c3:9a:1c:60:13:51:2e:5a:ac:cb:cd:aa:a1:2f: 12:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C0:C1:6B:80:5A:4B:B3:AE:73:ED:C2:4C:53:83:80:FC:0E:9A:49 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8BC2/12B3179239E811EFAFB75F95762E951A/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8BC2/12B3179239E811EFAFB75F95762E951A/r8DBa4BaS7Ouc-3CTFODgPwOmkk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 329435 sbgp-ipAddrBlock: critical IPv4: 102.209.0.0/22 Signature Algorithm: sha256WithRSAEncryption 27:17:8f:38:c9:81:da:18:a6:25:57:cf:ef:84:c7:1a:5b:88: bd:0b:4c:1d:3d:96:d3:f7:b7:89:cf:d7:43:2c:78:4e:bf:c0: 46:de:6f:12:64:88:f1:d3:1d:2b:1a:83:8e:8d:25:57:73:42: fe:bc:ad:3b:79:f3:6b:94:c8:f3:52:54:50:60:f1:59:d2:c3: 65:81:7f:59:0c:38:77:1b:c6:e9:ee:3a:2e:e4:67:4a:a6:76: 22:19:aa:30:7d:77:c3:61:30:7c:db:28:9d:3e:5f:26:b2:d9: 51:4d:bb:18:6e:70:f5:e5:96:75:8b:08:e4:70:fa:03:da:c1: a7:cd:41:ed:a5:54:15:19:e2:f4:55:1c:6d:39:27:8a:de:5f: f0:60:58:03:e5:c8:83:00:e3:f3:cc:a3:41:02:bf:05:9f:4b: 66:51:85:cc:25:5f:d8:6b:89:cc:4b:54:70:84:55:69:aa:1b: dd:86:7b:7c:b0:4a:8b:50:8f:96:6a:ce:76:d0:2a:fa:65:ad: a5:d3:5f:5a:a8:f1:cd:eb:42:6b:fa:6d:7f:04:16:7c:99:fd: 51:37:d2:52:96:0c:bc:2b:43:ea:d5:a0:9d:cc:c4:76:58:c3: 7e:33:3d:1c:3a:9e:7f:45:08:85:4e:86:ef:25:0f:1f:54:fd: bc:16:0d:21 -----BEGIN CERTIFICATE----- MIIGFjCCBP6gAwIBAgICPyAwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNTEzNDVaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkY4QkMyQUYxMTAvBgNVBAUTKEFGQzBDMTZCODA1QTRCQjNBRTczRURD MjRDNTM4MzgwRkMwRTlBNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDn2AUoM4F4N5IjVJu9Rfw/X0WW4EZeONIgZefhF53fWT9H4A5HWx3HzRHyJDQH yEVQ2g1SwqBxDDDl5hpxsDmz29+eHE9QGQQEsk3l/qt6xXofmJjFugsEs8yIO2sS sUeLvZ2jJJA2WxEyAlPaOkBd9gHdlj7Du/hnl8UUei9tKRJkYu7w7tyOIyZMq0Xd YTdUFC8Ptep3/P/1eRdEWB8AW2cTU+A0lmGjtocRe3ueLedlPDgZ2uszIlxtMfCl UFDX0lJniPB6H7xXJbiYmQez6MYsIlNxFXJDcYsFM6YloClSPStjEGe4qGgC2l9j ilXDmhxgE1EuWqzLzaqhLxIHAgMBAAGjggMLMIIDBzAdBgNVHQ4EFgQUr8DBa4Ba S7Ouc+3CTFODgPwOmkkwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZGOEJDMi8xMkIzMTc5MjM5RTgx MUVGQUZCNzVGOTU3NjJFOTUxQS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2RjhCQzIvMTJCMzE3OTIzOUU4MTFFRkFGQjc1Rjk1NzYyRTk1MUEvcjhEQmE0 QmFTN091Yy0zQ1RGT0RnUHdPbWtrLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBtswHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm0QAwDQYJKoZIhvcN AQELBQADggEBACcXjzjJgdoYpiVXz++ExxpbiL0LTB09ltP3t4nP10MseE6/wEbe bxJkiPHTHSsag46NJVdzQv68rTt582uUyPNSVFBg8VnSw2WBf1kMOHcbxunuOi7k Z0qmdiIZqjB9d8NhMHzbKJ0+Xyay2VFNuxhucPXllnWLCORw+gPawafNQe2lVBUZ 4vRVHG05J4reX/BgWAPlyIMA4/PMo0ECvwWfS2ZRhcwlX9hricxLVHCEVWmqG92G e3ywSotQj5ZqznbQKvplraXTX1qo8c3rQmv6bX8EFnyZ/VE30lKWDLwrQ+rVoJ3M xHZYw34zPRw6nn9FCIVOhu8lDx9U/bwWDSE= -----END CERTIFICATE-----Generated at Sun Jan 25 13:49:42 2026 by rpki-client